[Oisf-devel] [COMMIT] OISF branch, master, updated. suricata-2.1beta3-131-g4e177bc
OISF Git
noreply at openinfosecfoundation.org
Mon Mar 23 08:57:25 UTC 2015
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "OISF".
The branch, master has been updated
via 4e177bc9d623ff83bfcf314989cd238debde5111 (commit)
via 304c711a27ddca7413eb6fcd38929e5dc01c0dd2 (commit)
via e1efa7a0b54a710097be27c5294134bc9d277a11 (commit)
via 4609495c607a7c419ef1c9d8607559a96c0362c3 (commit)
via 5111aa2ec02089e1cbdd095d311610acd06cf638 (commit)
via 9bcb02119f9e3c443f10f48c2d602db45a460a6f (commit)
via 18f0351d9bcd69dff0839680050fea3bb8d3264b (commit)
via 0b262cbfdac968cb5a05f46f2907bcdbf87f4fec (commit)
from 0704ece4d7414dc5ba9427e9a0446dee9f34e13e (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 4e177bc9d623ff83bfcf314989cd238debde5111
Author: Victor Julien <victor at inliniac.net>
Date: Fri Mar 20 21:58:50 2015 +0100
detect-state: cleanups and comments
commit 304c711a27ddca7413eb6fcd38929e5dc01c0dd2
Author: Victor Julien <victor at inliniac.net>
Date: Fri Mar 20 19:23:09 2015 +0100
detect-state: use f->protomap instead of FlowGetProtoMapping(f->proto)
commit e1efa7a0b54a710097be27c5294134bc9d277a11
Author: Victor Julien <victor at inliniac.net>
Date: Fri Mar 20 16:09:10 2015 +0100
detect-flowbits: locking update
Make matches that can be in the POSTMATCH list aware of the lock hint.
commit 4609495c607a7c419ef1c9d8607559a96c0362c3
Author: Victor Julien <victor at inliniac.net>
Date: Fri Mar 20 16:22:19 2015 +0100
detect-flowint: conditional locking
commit 5111aa2ec02089e1cbdd095d311610acd06cf638
Author: Victor Julien <victor at inliniac.net>
Date: Fri Mar 20 15:47:39 2015 +0100
detect-state: handle 'post match' locking
The post match list was called with an unlocked flow until now.
However, recent de_state handling updates changed this. The stateful
detection code can now call the post match functions while keeping
the flow locked. The normal detection code still calls it with an
unlocked flow.
This patch adds a hint to the DetectEngineThreadCtx called
'flow_locked' that is set to true if the caller has already locked
the flow.
commit 9bcb02119f9e3c443f10f48c2d602db45a460a6f
Author: Victor Julien <victor at inliniac.net>
Date: Fri Mar 20 15:23:18 2015 +0100
detect-flowint: fix unlocked flow access
Some of the access to the flow and to structures retrieved from the
flow was unlocked.
This patch changes the logic to be wrapped in lock calls.
commit 18f0351d9bcd69dff0839680050fea3bb8d3264b
Author: Victor Julien <victor at inliniac.net>
Date: Fri Mar 20 14:30:00 2015 +0100
detect-state: fix profiling
commit 0b262cbfdac968cb5a05f46f2907bcdbf87f4fec
Author: Victor Julien <victor at inliniac.net>
Date: Tue Mar 17 23:05:07 2015 +0100
dns: optimize tx list walks
The detection engine and log engines can walk the tx list indirectly,
by looping AppLayerParserGetTx. This would lead to new list walks in
the DNS tx list though. Leading to bad performance.
This patch stores the last returned tx and uses that to determine if
the next tx is what we need next. If so, we can return that w/o list
walk.
-----------------------------------------------------------------------
Summary of changes:
src/app-layer-dns-common.c | 19 +++++++++++++++
src/app-layer-dns-common.h | 1 +
src/detect-engine-state.c | 31 +++++++++++++-----------
src/detect-filestore.c | 7 ++++--
src/detect-flowbits.c | 28 +++++++++++++++-------
src/detect-flowint.c | 57 +++++++++++++++++++++++++-------------------
src/detect-flowvar.c | 13 +++++++---
src/detect-flowvar.h | 5 ++--
src/detect.h | 6 ++++-
src/flow-bit.c | 27 ++++++++++++++-------
src/flow-bit.h | 3 +++
11 files changed, 133 insertions(+), 64 deletions(-)
hooks/post-receive
--
OISF
More information about the Oisf-devel
mailing list